Can't Verify Merchant Domain - error Domain verification failed - Error 13014

Dear Apple Developer Support, I would like to request a technical escalation to the engineering team regarding an ongoing issue with Apple Pay domain verification.

  1. Error returned by Apple

Even though Apple’s request to our domain returns HTTP 200, the verification still fails with:

resultCode: 13014 resultString: "Domain verification failed. Review your TLS Certificate configuration to confirm that the certificate is accessible and a supported TLS Cipher Suite is used." requestUrl: https://developer.apple.com/services-account/QH65B2/account/ios/identifiers/verifyDomain

  1. TLS Certificate Validation

We performed a full TLS analysis: Certificate issued by Sectigo Public Server Authentication CA DV E36 (public trusted CA) Full and correct certificate chain No handshake errors Configuration fully valid

SSL Labs rating: A From our side, the TLS configuration is confirmed to be correct.

  1. Accessibility of the .well-known file

The file is publicly and accessible It returns 200 OK and the content is exactly identical to the file downloaded from the Apple Developer Portal, without any modification.

Our network team confirmed that Apple’s verification request also receives HTTP 200 when pressing “Verify” in the Apple Developer Console.

  1. Network-side findings

We monitored Apple’s request in real time. Findings:

TLS handshake succeeds

No cipher mismatch

File delivered correctly

Status: 200 OK

No redirect or transformation applied

Despite this, Apple still returns error 13014.

  1. Request for engineering review

We kindly request that an Apple engineer verify the following:

The actual TLS handshake performed by Apple's verification service (cipher suite, protocol negotiation, SNI, trust chain).

Whether the Sectigo issuing CA is fully trusted and supported by your domain-verification backend.

If there is an internal reason behind error 13014—since the external message does not provide actionable details.

Whether the response is rejected for reasons other than TLS, given that the file is accessible and the request returns 200.

The exact condition that leads Apple to report “TLS Certificate configuration is incorrect” in this case.

This issue is blocking an urgent deployment and must be resolved as soon as possible.

  1. Existing case reference

Case ID: 102760005987

We are fully available to provide: full response headers packet captures (PCAP) SSL/TLS diagnostics file integrity checks server configuration details or join a technical call (Teams / WebEx) Thank you in advance for the escalation. Andrea

When performing the verification, I receive the above-mentioned error, and at the network level I observe the following sniffing. Is it correct that the verify request comes from a Microsoft IP, 52.112-110.3.72 ?

Can't Verify Merchant Domain - error Domain verification failed - Error 13014
 
 
Q